f87237859e6849d770c327ae300cdfbff8b8f9193e8ace2f739f8629a087b7f3 | Triage

Analysis

max time kernel
140s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2024 23:10

Sharing

Report Analysis Logs

General

Target

101.34.205.247:8080/get.exe
Size

4.7MB
MD5

80cccb614d30af19785389a143dca208
SHA1

164d20ad592254c9cac5d4638eeb2ae15ed39973
SHA256

ed7d4f76ce69a76c9fee73ce5fea0b843bd0827ec04ac9987589718bc5337c84
SHA512

995f941c88acb943be5caf486128b363978739ea34b97c6caab17e321dd248d16b494aebff0281d1031ed9bd7a51575beab3b354a9c72d32e171de43f31d8105
SSDEEP

98304:5H4R5KHagrOuLveyvczmFSxtxyguSGEptw2:5Y0LLvslTHBO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
3916	get.exe

C:\Users\Admin\AppData\Local\Temp\101.34.205.247_8080\get.exe
"C:\Users\Admin\AppData\Local\Temp\101.34.205.247_8080\get.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3916-0-0x0000000067D40000-0x00000000685FA000-memory.dmp

Filesize
8.7MB

Download
memory/3916-10-0x0000000000070000-0x00000000005B8000-memory.dmp

Filesize
5.3MB

Download
memory/3916-23-0x0000000000070000-0x00000000005B8000-memory.dmp

Filesize
5.3MB

Download